Lucene search
AcronisCVE-2024-34017HistoryAug 29, 2024 - 8:15 p.m.
CVE-2024-34017
2024-08-2920:15:07
CWE-427
Acronis
web.nvd.nist.gov
23
local privilege escalation
dll hijacking
acronis snap deploy
windows
cve-2024-34017
CVSS3
7.3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
EPSS
0
Percentile
9.6%
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Snap Deploy (Windows) before build 4569.
Affected configurations
Node
acronissnap_deployRange<6windows
ORacronissnap_deployMatch6-windows
ORacronissnap_deployMatch6update1windows
ORacronissnap_deployMatch6update1.1windows
ORacronissnap_deployMatch6update1.2windows
| Vendor | Product | Version | CPE |
|---|---|---|---|
| acronis | snap_deploy | * | cpe:2.3:a:acronis:snap_deploy:*:*:*:*:*:windows:*:* |
| acronis | snap_deploy | 6 | cpe:2.3:a:acronis:snap_deploy:6:-:*:*:*:windows:*:* |
| acronis | snap_deploy | 6 | cpe:2.3:a:acronis:snap_deploy:6:update1:*:*:*:windows:*:* |
| acronis | snap_deploy | 6 | cpe:2.3:a:acronis:snap_deploy:6:update1.1:*:*:*:windows:*:* |
| acronis | snap_deploy | 6 | cpe:2.3:a:acronis:snap_deploy:6:update1.2:*:*:*:windows:*:* |
CNA Affected
[
{
"vendor": "Acronis",
"product": "Acronis Snap Deploy",
"platforms": [
"Windows"
],
"versions": [
{
"version": "unspecified",
"status": "affected",
"lessThan": "4569",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
}
]Related
cvelist
cvelist
CVE-2024-34017
2024-08-29 19:14:19
vulnrichment
vulnrichment
CVE-2024-34017
2024-08-29 19:14:19
nvd
nvd
CVE-2024-34017
2024-08-29 20:15:07
CVSS3
7.3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
EPSS
0
Percentile
9.6%
Related for CVE-2024-34017